Contents

Anatomy

Surgeon is wrapped in a CBF layer. Inside is a basic gzip compressed zImage with an initramfs that includes all of the programs necessary to run the basic Linux and updating software.

Once in USB boot mode, either with LFConnect or with out the surgeon.cbf file can be sent to the device, where it is loaded by Emerald Boot and executed.

This will start the DFTP Device which is basically a modified FTP server. You can use OpenLFConnect to exploit various functionality of the server. Using the update command the kernel, erootfs and bulk firmwares can be flashed to NAND. You can also mount the already installed firmware partitions, if you need to fix an issue that can not be done during normal booting. Do remember Surgeon is completely temporary, anything you modifying with in Surgeon, will not remain after a reboot, which can make it an excellent means of non-destructive testing.

Versions

Device

Language

File

kernel_load

kernel_jump

compressed

initramfs

Size Limit

DFTP Version

LeapPad

English

Surgeon.cbf

0x00010000

0x00010000

True

True

8MB Memory Limited

1.12

Explorer

English

Surgeon.cbf

0x00008000

0x00008000

True

True

8MB Memory Limited

1.12

Explorer

French

Surgeon.cbf

0x00008000

0x00008000

True

True

8MB Memory Limited

1.8

Building

Prerequisites

Software Needed

Rootfs

The easiest way is to use OpenLFConnect, and extract one from a factory Surgeon file. These commands will download the Surgeon package, extract it, then extract the initramfs(rootfs) to <current dir>/rootfs.lx/